Lucene search
+L

1 matches found

Vulnrichment
Vulnrichment
added 2024/05/14 2:27 p.m.12 views

CVE-2024-4871 Foreman: host ssh key not being checked in remote execution

A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in-the-middle attack MITM, denial of...

6.8CVSS7AI score0.00612EPSS
SaveExploits0References3
Rows per page
Query Builder